--- title: VLCM Cybersecurity Alerts - May, 2019 description: Another round of advisories for the month of May, including a critical notification from Microsoft and even the NSA, urging customers to ensure deployments of Windows 7, Server 2008 and out of support versions (Windows XP / Server 2003) receive available patches. Security organizations and researchers are warning that a wormable exploit targeting unpatched systems will probably appear in the coming months and could spread quickly from one infected system to other vulnerable systems on the same network. The VLCM Cybersecurity team is urging customers to apply the associated patches as soon as possible and also ensure no vulnerable systems are exposed to the public Internet, especially systems with remote desktop enabled. image: https://blog.vlcm.com/hubfs/cybersecurity-1.jpg --- [![VLCM Getting IT Right Logo](https://blog.vlcm.com/hubfs/_vlcmlogos/vlcm%20tagline.svg "VLCM Getting IT Right Logo")](https://www.vlcm.com) # VLCM Cybersecurity Alerts - May, 2019 ![](https://blog.vlcm.com/hubfs/vlcm.png) Joe Warner June 6, 2019 [mailto:?subject=[SUBJECT]&body=Check%20out%20this%20site%20https://blog.vlcm.com/blog/cybersecurity-may-2019](mailto:?subject=[SUBJECT]&body=Check%20out%20this%20site%20https://blog.vlcm.com/blog/cybersecurity-may-2019) ![cybersecurity-1](https://blog.vlcm.com/hs-fs/hubfs/cybersecurity-1.jpg?width=1200&name=cybersecurity-1.jpg)   Another round of advisories for the month of May, including a [critical notification from Microsoft](https://blogs.technet.microsoft.com/msrc/2019/05/30/a-reminder-to-update-your-systems-to-prevent-a-worm/) and even the [NSA](https://www.nsa.gov/News-Features/News-Stories/Article-View/Article/1865726/nsa-cybersecurity-advisory-patch-remote-desktop-services-on-legacy-versions-of/), urging customers to ensure deployments of Windows 7, Server 2008 and out of support versions (Windows XP / Server 2003) receive available patches.  Security organizations and researchers are warning that a wormable exploit targeting unpatched systems will probably appear in the coming months and could spread quickly from one infected system to other vulnerable systems on the same network.  The VLCM Cybersecurity team is urging customers to apply the associated patches as soon as possible and also ensure no vulnerable systems are exposed to the public Internet, especially systems with remote desktop enabled. ---   Mozilla Releases Security Updates for Firefox May 21, 2019 Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Mozilla Security Advisories for [Firefox 67](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.mozilla.org%2Fen-US%2Fsecurity%2Fadvisories%2Fmfsa2019-13%2F&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cf774cd12a92c41c46f5308d6de1b7542%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636940606847758058&sdata=RfOTa7ZL43uan3gGp1UXB7GLKxpIGYD2T2tkU5l%2FYMc%3D&reserved=0) and [Firefox ESR 60.7](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.mozilla.org%2Fen-US%2Fsecurity%2Fadvisories%2Fmfsa2019-14%2F&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cf774cd12a92c41c46f5308d6de1b7542%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636940606847768075&sdata=3yn9pXGb0uBz1DRXwKFDg0gM77yYbiiaziEH4Xp7XsE%3D&reserved=0) and apply the necessary updates.   ** ** **Microsoft Releases Security Updates to Address Remote Code Execution Vulnerability** May 16, 2019 Microsoft has released security updates to address a remote code execution vulnerability in the following in-support and out-of-support operating systems: - In-support systems: Windows 7, Windows Server 2008 R2, and Windows Server 2008 - Out-of-support systems: Windows 2003 and Windows XP A remote attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the [Microsoft Security Advisory](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fportal.msrc.microsoft.com%2Fen-US%2Fsecurity-guidance%2Fadvisory%2FCVE-2019-0708&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cba41e36a64f440ab86ba08d6da2565c1%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636936251494356577&sdata=LYScRcsq37veAJbVa%2BE1bYL%2FsOJPZDBX9MCa0IPr%2B4M%3D&reserved=0) and [Microsoft Customer Guidance for CVE-2019-0708](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F4500705%2Fcustomer-guidance-for-cve-2019-0708&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cba41e36a64f440ab86ba08d6da2565c1%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636936251494366585&sdata=a%2B1gJUXa66UflJx0camXuEY2qBZxG%2Bzf76f%2FPacmNek%3D&reserved=0) and apply the necessary updates.     Cisco Releases Security Updates for Multiple Products May 15, 2019 Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the [Cisco Security Advisories page](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.cisco.com%2Fsecurity%2Fcenter%2FpublicationListing.x&data=02%7C01%7Cjwarner%40vlcmtech.com%7C4b0aee5c6e3c40c8de4e08d6d96d9a38%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636935462096297103&sdata=%2Fn7hhUHyCkbz9MadBsdQVH36u2G5A7p1f14CMx3rnlk%3D&reserved=0) and apply the necessary updates.     VMware Releases Security Updates May 14, 2019 VMware has released security updates to address vulnerabilities in vCenter Server, ESXi, Workstation, and Fusion. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review VMware Security Advisories [VMSA-2019-0007](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.vmware.com%2Fsecurity%2Fadvisories%2FVMSA-2019-0007.html&data=02%7C01%7Cjwarner%40vlcmtech.com%7C895166ad5a974427cdd308d6d8b58826%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934671528678769&sdata=FkOG9tlIzp3ifsQccoD%2F4lB1jHqv9FZbIefpYIYdPag%3D&reserved=0) and [VMSA-2019-0008](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.vmware.com%2Fsecurity%2Fadvisories%2FVMSA-2019-0008.html&data=02%7C01%7Cjwarner%40vlcmtech.com%7C895166ad5a974427cdd308d6d8b58826%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934671528678769&sdata=AkTfJ22GcgzntMwmc9yhzSmyNRsIFUg%2FbN2fXkIajUA%3D&reserved=0) and apply the necessary updates.     Adobe Releases Security Updates May 14, 2019 Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Adobe Security Bulletins [APSB19-29](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhelpx.adobe.com%2Fsecurity%2Fproducts%2Fmedia-encoder%2Fapsb19-29.html&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cc2a79ab9e2994bf28ba308d6d8a64a1c%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934606048056775&sdata=AehGNerRa1s615QvsVED5PvRPcaVmCMiS0A7kyjvcOg%3D&reserved=0), [APSB19-26](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhelpx.adobe.com%2Fsecurity%2Fproducts%2Fflash-player%2Fapsb19-26.html&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cc2a79ab9e2994bf28ba308d6d8a64a1c%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934606048066788&sdata=d%2FygStNoGXnW%2BvVWGdJZCg%2FtdFsA%2F3ZNJJESGb4eFQg%3D&reserved=0), and [APSB19-18](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhelpx.adobe.com%2Fsecurity%2Fproducts%2Facrobat%2Fapsb19-18.html&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cc2a79ab9e2994bf28ba308d6d8a64a1c%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934606048066788&sdata=RuwqV6UvlJrY6am7q2TfSREm5gXotnpSN4%2Fn0EHp0Q0%3D&reserved=0) and apply the necessary updates.     Intel Releases Security Updates, Mitigations for Multiple Products May 14, 2019 Intel has released security updates and recommendations to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.   The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the [Intel Product Security Center Advisories](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.intel.com%2Fcontent%2Fwww%2Fus%2Fen%2Fsecurity-center%2Fdefault.html&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cdc875f983fc84872d98608d6d8a62e5b%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934605587987999&sdata=XNkcgzi%2Fg7Mtf8Qe3UvzzUs5YkiCG%2BTl613HkH%2F3yqs%3D&reserved=0) page, apply the necessary mitigations, and refer to vendors for appropriate patches, when available.     Microsoft Releases May 2019 Security Updates May 14, 2019 Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Microsoft’s May 2019 [Security Update Summary](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fportal.msrc.microsoft.com%2Fen-us%2Fsecurity-guidance%2Freleasenotedetail%2Fe5989c8b-7046-e911-a98e-000d3a33a34d&data=02%7C01%7Cjwarner%40vlcmtech.com%7C540d2bf2b9a34581d77308d6d8a4f3c1%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934600317625897&sdata=wBRSYS1ZvUcAxGQ1FG0iGh8yeX%2BA0AGnZB9409hn0VM%3D&reserved=0) and [Deployment Information](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F20190514%2Fsecurity-update-deployment-information-may-14-2019&data=02%7C01%7Cjwarner%40vlcmtech.com%7C540d2bf2b9a34581d77308d6d8a4f3c1%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934600317635905&sdata=ZROSp4Fz%2BnJ7YBxWSSE563oQ1DNgThNUQP7wTemWSho%3D&reserved=0) and apply the necessary updates.     Facebook Releases Security Advisory for WhatsApp May 14, 2019 Facebook has released a security advisory to address a vulnerability in WhatsApp. A remote attacker could exploit this vulnerability to take control of an affected device. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users to review the Facebook Security Advisory for [CVE-2019-3568](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Fsecurity%2Fadvisories%2Fcve-2019-3568&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cbb71c032c5fb40cd4f5f08d6d897f055%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934544429169524&sdata=OyBRnHsXi9%2Fp%2FoN9OPNw6a%2FmdchnLkkfoCodpr1t8%2FM%3D&reserved=0) and upgrade to the appropriate version.     Apple Releases Multiple Security Updates May 14, 2019 Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Apple security pages for the following products and apply the necessary updates: - [watchOS 5.2.1](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.apple.com%2Fen-us%2FHT210122&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cddd81c70c20c4b630af908d6d88774a3%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934473624263533&sdata=c2DAoy7ACUyv9rEM9AZZb2KW0BqGPAkSXhYRo6mf9zU%3D&reserved=0) - [Safari 12.1.1](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.apple.com%2Fen-us%2FHT210123&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cddd81c70c20c4b630af908d6d88774a3%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934473624273541&sdata=tw80a2rKQBxEVuzasxK8JxzQ2GXz%2B46BhYDa%2BKnA6Bg%3D&reserved=0) - [Apple TV Software 7.3](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.apple.com%2Fen-us%2FHT210121&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cddd81c70c20c4b630af908d6d88774a3%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934473624283549&sdata=7lf84ZHc%2Fc07rpX4UbztlBRo8i5bvFwOhsjQRxbdd0k%3D&reserved=0) - [tvOS 12.3](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.apple.com%2Fen-us%2FHT210120&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cddd81c70c20c4b630af908d6d88774a3%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934473624283549&sdata=kAnyBJTgj62%2Fjz3PgIbx2ahhBnxU9FMsv0pI72osPcs%3D&reserved=0) - [iOS 12.3](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.apple.com%2Fen-us%2FHT210118&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cddd81c70c20c4b630af908d6d88774a3%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934473624293558&sdata=vS55qEeWJTiCl%2FUrpaxe6NbP0ttLUC6tzUY0tgPorYg%3D&reserved=0) - [macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.apple.com%2Fen-us%2FHT210119&data=02%7C01%7Cjwarner%40vlcmtech.com%7Cddd81c70c20c4b630af908d6d88774a3%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934473624303566&sdata=3fHmrVxDlnJg5FPBx7bucQdzvzowDy1CbDgRdST0N0Y%3D&reserved=0)     Cisco Releases Security Updates May 14, 2019 Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Cisco Security Advisories and apply the necessary updates: - Cisco IOS XE Software Web UI Command Injection Vulnerability [cisco-sa-20190513-webui](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.cisco.com%2Fsecurity%2Fcenter%2Fcontent%2FCiscoSecurityAdvisory%2Fcisco-sa-20190513-webui&data=02%7C01%7Cjwarner%40vlcmtech.com%7C2af13987d2da4cc26f5408d6d87ac09a%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934419057628189&sdata=l7Dtu8nP%2B6U4OGYk1RojON0sC2UDJpe03dMA%2Btgt4So%3D&reserved=0) - Cisco Secure Boot Hardware Tampering Vulnerability [cisco-sa-20190513-secureboot](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.cisco.com%2Fsecurity%2Fcenter%2Fcontent%2FCiscoSecurityAdvisory%2Fcisco-sa-20190513-secureboot&data=02%7C01%7Cjwarner%40vlcmtech.com%7C2af13987d2da4cc26f5408d6d87ac09a%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636934419057638197&sdata=DotRuIyMmwF3CKleWWXwED4M4urvnLtaO%2FCLHIA4Pl4%3D&reserved=0)     North Korean Malicious Cyber Activity May 9, 2019 The Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) have identified a malware variant—referred to as ELECTRICFISH—used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Malware Analysis Report (MAR) [MAR-10135536-21](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.us-cert.gov%2Fncas%2Fanalysis-reports%2FAR19-129A&data=02%7C01%7Cjwarner%40vlcmtech.com%7C7b6e5aedf9a44963230a08d6d4c715df%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636930348876441300&sdata=H%2F2FsKKEdUZCGs%2B9BPzlmmvZ2unZDtMv832wTLJ1w%2F4%3D&reserved=0) and the page on [HIDDEN COBRA - North Korean Malicious Cyber Activity](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.us-cert.gov%2FHIDDEN-COBRA-North-Korean-Malicious-Cyber-Activity&data=02%7C01%7Cjwarner%40vlcmtech.com%7C7b6e5aedf9a44963230a08d6d4c715df%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636930348876451304&sdata=LwjHxc34Pdo2FPZHe66hHU5rm6Ny3UEI7UdPbDPh%2BUo%3D&reserved=0) for more information.     PrinterLogic Print Management Software Vulnerabilities May 6, 2019 The CERT Coordination Center (CERT/CC) has released information on vulnerabilities affecting PrinterLogic Print Management Software. A remote attacker could exploit these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the CERT/CC Vulnerability Note [VU#1629249](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.kb.cert.org%2Fvuls%2Fid%2F169249%2F&data=02%7C01%7Cjwarner%40vlcmtech.com%7C04989f86d729475fd38d08d6d268cf8a%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636927744929675737&sdata=Akrkq4ZIzBD5NuKQHZ2QycNz%2F%2FcgR229UXeLcKHF%2FjA%3D&reserved=0) and consider the listed workarounds until patches are made available.     Cisco Releases Security Updates May 1, 2019 Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.    The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the [Cisco Security Advisory page](https://nam01.safelinks.protection.outlook.com/?url=https:%2F%2Ftools.cisco.com%2Fsecurity%2Fcenter%2FpublicationListing.x%3Fproduct%3DCisco%26sort%3D-day_sir%23~Vulnerabilities&data=02%7C01%7Cjwarner%40vlcmtech.com%7C8e738a4db9e4422c20ef08d6ce76b92f%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636923406643853525&sdata=sw2AkjGUUt3TG1OPks5Cd8aoo%2FwUGMaafIbHfbbwdIw%3D&reserved=0)  and apply the necessary updates.     Google Releases Security Updates for Chrome May 1, 2019 Google has released Chrome version 74.0.3729.131 for Windows, Mac, and Linux. This version addresses two vulnerabilities, one of which an attacker could exploit to take control of an affected system. The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the [Chrome Release](https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchromereleases.googleblog.com%2F2019%2F04%2Fstable-channel-update-for-desktop_30.html&data=02%7C01%7Cjwarner%40vlcmtech.com%7C17e6ddb794c64fb5a39608d6ce4abf51%7Cd4c6fc04732f42258730f686adab6818%7C1%7C0%7C636923217768958196&sdata=nmUnTxNcREq4QKT2stAuNAE9mTYFd1t8EPKGCF%2B1Yq8%3D&reserved=0) and apply the necessary updates.     **Copyright VLCM   |  All Rights Reserved  |  [Privacy](https://www.vlcm.com/privacy)** - [![facebook icon](https://blog.vlcm.com/hs-fs/hubfs/i-img/social-fa.png?t=1444107731905&width=22&name=social-fa.png "facebook icon")](https://www.facebook.com/VLCMtech/)[![linkedin icon](https://blog.vlcm.com/hs-fs/hubfs/i-img/social-in.png?t=1444107731905&width=22&name=social-in.png "linkedin icon") ](https://www.linkedin.com/company/valcom-vlcm-) [![instagram icon](https://blog.vlcm.com/hs-fs/hubfs/i-img/social-phot.png?t=1444107731905&width=22&name=social-phot.png "instagram icon") ](https://www.instagram.com/vlcmtech/) [![twitter icon](https://blog.vlcm.com/hs-fs/hubfs/i-img/social-twi.png?t=1444107731905&width=22&name=social-twi.png "twitter icon") ](https://twitter.com/vlcmtech)[![shopping cart icon](https://blog.vlcm.com/hs-fs/hubfs/cart.png?width=24&name=cart.png "shopping cart icon") ](https://usm.channelonline.com/valcomslc/storesite/Login/?destination=/valcomslc/storesite/Search/Category/index.co) ![](https://px.ads.linkedin.com/collect/?pid=494756&fmt=gif)